Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/W7rpeseQF0uKMJY1UUsi8PfteBU.roa
File:                     W7rpeseQF0uKMJY1UUsi8PfteBU.roa (raw, json)
Hash identifier:          NvKGwdKGS9Z6PRdPWBuUW6QevCFVdEYCIhqzbLpPpUs=
Subject key identifier:   5B:BA:E9:7A:C7:90:17:4B:8A:30:96:35:51:4B:22:F0:F7:ED:78:15
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       17C6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/W7rpeseQF0uKMJY1UUsi8PfteBU.roa
Signing time:             Mon 10 Feb 2025 14:07:15 +0000
ROA not before:           Mon 10 Feb 2025 14:07:15 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131602
IP address blocks:        106.105.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 08:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6086 (0x17c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb 10 14:07:15 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5BBAE97AC790174B8A309635514B22F0F7ED7815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:7a:a8:0a:ee:89:91:5c:3b:35:60:10:9d:
                    7f:95:6c:a1:9e:43:8f:e6:3a:ac:58:8d:ae:af:9b:
                    93:3b:1f:64:1f:11:de:fa:57:8f:d9:ad:cc:8c:69:
                    f9:c8:3c:4d:b7:e3:b0:35:41:e5:7c:13:c7:c4:da:
                    a7:b5:e1:6a:75:2d:ab:f2:5a:bb:db:89:3e:95:c5:
                    a7:ae:85:f0:5f:b5:ed:17:31:fe:db:67:ab:74:31:
                    e2:5c:21:31:28:12:95:06:51:96:89:02:06:5a:71:
                    01:48:b7:4e:06:71:f3:83:48:f8:04:e7:52:b3:79:
                    db:53:84:c3:3c:ee:6c:4a:3c:25:d2:8f:ec:be:c4:
                    b8:25:a5:6d:39:5e:32:29:a1:54:41:0b:3d:50:1d:
                    c4:ba:75:ae:b3:09:43:da:d6:50:bd:2c:7e:8a:2b:
                    4f:6e:c2:5e:b6:3f:bc:cd:62:c9:80:45:a2:ff:05:
                    25:fc:60:4c:ca:e7:7c:a4:28:62:b3:ef:4f:95:b8:
                    6c:b8:46:35:1b:10:5d:06:62:f6:45:e4:d5:c5:0e:
                    ba:99:ee:12:4c:b8:00:2b:11:1f:74:32:ee:b3:d8:
                    d6:db:4f:66:56:5e:13:6a:c6:48:c0:b9:44:19:dd:
                    45:ee:ed:37:ab:4f:d9:e9:b9:b7:98:81:24:4d:d7:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BA:E9:7A:C7:90:17:4B:8A:30:96:35:51:4B:22:F0:F7:ED:78:15
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/W7rpeseQF0uKMJY1UUsi8PfteBU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:4b:0f:01:ba:ca:2d:05:be:b9:00:87:e1:44:52:ce:83:
         d3:51:d2:65:be:65:50:c2:cf:24:3c:35:c6:f6:42:73:ca:8c:
         b1:15:db:86:d5:dc:29:03:ac:12:2a:f3:59:f1:be:8c:4c:13:
         f6:90:0a:58:07:37:2e:d1:b9:ce:19:c9:5d:77:de:8f:7f:6f:
         5a:8b:61:06:07:ec:33:cf:c6:79:63:c1:ad:79:b4:7e:b0:4e:
         10:97:e8:6e:19:ba:d9:1e:31:c3:a8:07:95:70:d5:d7:0c:2e:
         24:8b:d0:99:df:2f:d5:9b:b5:4e:22:98:aa:2d:8f:c2:8c:c0:
         f7:3a:ae:7b:54:8e:26:5d:1f:9f:f1:56:ba:d8:33:f1:c2:ff:
         87:15:41:7e:de:56:84:8c:25:17:0e:8a:51:34:0e:1a:f9:c1:
         a6:77:57:24:5c:7a:ce:3f:c4:68:d1:3a:41:1d:e4:01:7e:58:
         25:37:93:2b:22:d4:02:fc:b6:3a:28:a3:41:8e:26:9b:aa:18:
         01:9d:03:c0:61:42:87:6f:81:15:16:eb:4e:1c:56:74:0e:b2:
         40:58:b3:f9:3c:d7:cd:e6:7a:da:50:af:f6:40:65:fd:d5:fd:
         ee:16:f8:58:10:84:38:a9:41:9f:46:fe:0a:d7:83:dd:17:f2:
         7c:57:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:07:33 2025 by rpki-client